Vulnerability · Published May 8, 2024 · Assigned by mitre
CVE-2024-27280
Critical 9.8
In plain English
A critical-severity buffer overflow in the ruby package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.4% (higher than 84% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)2.4%top 16.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte and ungetc methods on a StringIO can read past the end of a string, and a subsequent call to StringIO.gets may return the memory value. 3.0.3 is the main fixed version; however, for Ruby 3.0 users, a fixed version is stringio 3.0.1.1, and for Ruby 3.1 users, a fixed version is stringio 3.0.1.2.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | ruby | 3.3.1-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | ruby | 3.1.5-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | ruby | 3.0.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | ruby | 2.5.9-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:9 | ruby | 3.1.5-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | ruby | 3.3.1-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:9 | ruby | 3.0.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | ruby-bundled-gems | 3.1.5-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | ruby-bundled-gems | 3.3.1-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:9 | ruby-bundled-gems | 3.1.5-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | ruby-bundled-gems | 3.3.1-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:8 | ruby-default-gems | 3.3.1-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | ruby-default-gems | 3.0.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | ruby-default-gems | 3.1.5-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:9 | ruby-default-gems | 3.3.1-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:9 | ruby-default-gems | 3.0.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | ruby-default-gems | 3.1.5-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:8 | ruby-devel | 3.1.5-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | ruby-devel | 3.3.1-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | ruby-devel | 3.0.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | ruby-devel | 2.5.9-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:9 | ruby-devel | 3.0.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | ruby-devel | 3.1.5-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | ruby-devel | 3.3.1-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:8 | ruby-doc | 3.3.1-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | ruby-doc | 3.0.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | ruby-doc | 3.1.5-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | ruby-doc | 2.5.9-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:9 | ruby-doc | 3.1.5-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | ruby-doc | 3.3.1-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:9 | ruby-doc | 3.0.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | ruby-irb | 2.5.9-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | ruby-libs | 2.5.9-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | ruby-libs | 3.1.5-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | ruby-libs | 3.3.1-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | ruby-libs | 3.0.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:9 | ruby-libs | 3.1.5-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | ruby-libs | 3.0.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | ruby-libs | 3.3.1-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:8 | rubygem-abrt | 0.3.0-4.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-abrt | 0.4.0-1.module_el8.9.0+3746+91b8233a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-abrt | 0.4.0-1.module_el8.10.0+3799+191214cc | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-abrt | 0.4.0-1.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.3.0-4.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.4.0-1.module_el8.9.0+3746+91b8233a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.4.0-1.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-abrt-doc | 0.4.0-1.module_el8.10.0+3799+191214cc | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-bigdecimal | 3.1.1-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-bigdecimal | 1.3.4-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-bigdecimal | 3.0.0-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-bigdecimal | 3.1.5-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:9 | rubygem-bigdecimal | 3.1.1-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-bigdecimal | 3.0.0-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-bigdecimal | 3.1.5-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:8 | rubygem-bson | 4.3.0-2.module_el8.6.0+3170+4b08f9d4 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-bson | 4.3.0-2.module_el8.5.0+259+8cec6917 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-bson | 4.3.0-2.module_el8.5.0+2625+ec418553 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-bson-doc | 4.3.0-2.module_el8.5.0+2625+ec418553 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-bundler | 2.5.9-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-bundler | 2.2.33-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-bundler | 1.16.1-4.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-bundler | 2.3.27-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:9 | rubygem-bundler | 2.2.33-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-bundler | 2.3.27-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-bundler | 2.5.9-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:8 | rubygem-bundler-doc | 1.16.1-4.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-did_you_mean | 1.2.0-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-io-console | 0.7.1-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-io-console | 0.4.6-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-io-console | 0.5.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-io-console | 0.5.11-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:9 | rubygem-io-console | 0.5.11-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-io-console | 0.5.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-io-console | 0.7.1-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:8 | rubygem-irb | 1.4.1-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-irb | 1.11.0-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-irb | 1.3.5-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:9 | rubygem-irb | 1.4.1-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-irb | 1.11.0-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:9 | rubygem-irb | 1.3.5-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | rubygem-json | 2.5.1-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-json | 2.7.1-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-json | 2.6.1-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-json | 2.1.0-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:9 | rubygem-json | 2.6.1-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-json | 2.7.1-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:9 | rubygem-json | 2.5.1-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | rubygem-minitest | 5.20.0-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-minitest | 5.15.0-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-minitest | 5.14.2-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-minitest | 5.10.3-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:9 | rubygem-minitest | 5.20.0-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:9 | rubygem-minitest | 5.15.0-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-minitest | 5.14.2-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | rubygem-mongo | 2.5.1-2.module_el8.5.0+2625+ec418553 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-mongo-doc | 2.5.1-2.module_el8.5.0+2625+ec418553 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-mysql2 | 0.4.10-4.module_el8.5.0+2625+ec418553 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.5-1.module_el8.10.0+3799+191214cc | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-2.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-mysql2 | 0.5.3-3.module_el8.9.0+3746+91b8233a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-mysql2 | 0.4.10-4.module_el8.5.0+259+8cec6917 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-mysql2 | 0.4.10-4.module_el8.6.0+3170+4b08f9d4 | ALSA-2024:4499 |
| AlmaLinux:9 | rubygem-mysql2 | 0.5.4-1.module_el9.1.0+8+503f6fbd | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-mysql2 | 0.5.5-1.module_el9.4.0+75+1a8fe981 | ALSA-2024:3671 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.3-3.module_el8.9.0+3746+91b8233a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.4.10-4.module_el8.5.0+2625+ec418553 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.3-2.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-mysql2-doc | 0.5.5-1.module_el8.10.0+3799+191214cc | ALSA-2024:3670 |
| AlmaLinux:9 | rubygem-mysql2-doc | 0.5.4-1.module_el9.1.0+8+503f6fbd | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-mysql2-doc | 0.5.5-1.module_el9.4.0+75+1a8fe981 | ALSA-2024:3671 |
| AlmaLinux:8 | rubygem-net-telnet | 0.1.1-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-openssl | 2.1.2-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-pg | 1.3.2-1.module_el8.9.0+3746+91b8233a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.5.0+118+1ab773e1 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.6.0+3144+d138acf1 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-pg | 1.0.0-3.module_el8.9.0+3635+c6f99506 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-pg | 1.5.4-1.module_el8.10.0+3799+191214cc | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-pg | 1.2.3-1.module_el8.5.0+2595+0c654ebc | ALSA-2024:3500 |
| AlmaLinux:9 | rubygem-pg | 1.5.4-1.module_el9.4.0+75+1a8fe981 | ALSA-2024:3671 |
| AlmaLinux:9 | rubygem-pg | 1.3.5-1.module_el9.1.0+8+503f6fbd | ALSA-2024:3668 |
| AlmaLinux:8 | rubygem-pg-doc | 1.3.2-1.module_el8.9.0+3746+91b8233a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-pg-doc | 1.2.3-1.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-pg-doc | 1.0.0-3.module_el8.9.0+3635+c6f99506 | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-pg-doc | 1.2.3-1.module_el8.5.0+2595+0c654ebc | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-pg-doc | 1.5.4-1.module_el8.10.0+3799+191214cc | ALSA-2024:3670 |
| AlmaLinux:9 | rubygem-pg-doc | 1.3.5-1.module_el9.1.0+8+503f6fbd | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-pg-doc | 1.5.4-1.module_el9.4.0+75+1a8fe981 | ALSA-2024:3671 |
| AlmaLinux:8 | rubygem-power_assert | 2.0.3-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-power_assert | 1.1.1-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-power_assert | 2.0.1-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-power_assert | 1.2.1-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:9 | rubygem-power_assert | 2.0.1-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-power_assert | 1.2.1-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-power_assert | 2.0.3-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:8 | rubygem-psych | 3.0.2-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-psych | 5.1.2-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-psych | 3.3.2-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-psych | 4.0.4-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:9 | rubygem-psych | 3.3.2-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-psych | 5.1.2-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:9 | rubygem-psych | 4.0.4-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:8 | rubygem-racc | 1.7.3-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:9 | rubygem-racc | 1.7.3-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:8 | rubygem-rake | 13.1.0-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-rake | 12.3.3-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-rake | 13.0.6-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-rake | 13.0.3-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:9 | rubygem-rake | 13.1.0-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:9 | rubygem-rake | 13.0.6-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-rake | 13.0.3-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | rubygem-rbs | 3.4.0-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-rbs | 2.7.0-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-rbs | 1.4.0-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:9 | rubygem-rbs | 3.4.0-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:9 | rubygem-rbs | 2.7.0-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-rbs | 1.4.0-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:8 | rubygem-rdoc | 6.6.3.1-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-rdoc | 6.3.4.1-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-rdoc | 6.0.1.1-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-rdoc | 6.4.1.1-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:9 | rubygem-rdoc | 6.4.1.1-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-rdoc | 6.3.4.1-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-rdoc | 6.6.3.1-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:8 | rubygem-rexml | 3.2.5-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-rexml | 3.2.5-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygem-rexml | 3.2.6-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:9 | rubygem-rexml | 3.2.6-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:9 | rubygem-rexml | 3.2.5-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-rexml | 3.2.5-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:8 | rubygem-rss | 0.2.9-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-rss | 0.3.0-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-rss | 0.2.9-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:9 | rubygem-rss | 0.2.9-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-rss | 0.3.0-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:9 | rubygem-rss | 0.2.9-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:8 | rubygem-test-unit | 3.2.7-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygem-test-unit | 3.5.3-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-test-unit | 3.6.1-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-test-unit | 3.3.7-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:9 | rubygem-test-unit | 3.6.1-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:9 | rubygem-test-unit | 3.3.7-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-test-unit | 3.5.3-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:8 | rubygem-typeprof | 0.21.9-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygem-typeprof | 0.21.3-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygem-typeprof | 0.15.2-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:9 | rubygem-typeprof | 0.15.2-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygem-typeprof | 0.21.3-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:9 | rubygem-typeprof | 0.21.9-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:8 | rubygem-xmlrpc | 0.3.0-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygems | 2.7.6.3-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygems | 3.2.33-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
| AlmaLinux:8 | rubygems | 3.3.27-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygems | 3.5.9-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:9 | rubygems | 3.5.9-2.module_el9.4.0+102+68a93853 | ALSA-2024:3671 |
| AlmaLinux:9 | rubygems | 3.2.33-162.el9_4 | ALSA-2024:3838 |
| AlmaLinux:9 | rubygems | 3.3.27-144.module_el9.4.0+101+d58a8d95 | ALSA-2024:3668 |
| AlmaLinux:8 | rubygems-devel | 2.7.6.3-112.module_el8.10.0+3871+342e2c2f | ALSA-2024:4499 |
| AlmaLinux:8 | rubygems-devel | 3.5.9-2.module_el8.10.0+3855+767cb125 | ALSA-2024:3670 |
| AlmaLinux:8 | rubygems-devel | 3.3.27-143.module_el8.10.0+3854+02eaa59a | ALSA-2024:3546 |
| AlmaLinux:8 | rubygems-devel | 3.2.33-143.module_el8.10.0+3852+ce828b19 | ALSA-2024:3500 |
Affected products (as reported)
Weakness: CWE-120 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://hackerone.com/reports/1399856
- https://www.ruby-lang.org/en/news/2024/03/21/buffer-overread-cve-2024-27280/
- https://security.netapp.com/advisory/ntap-20250502-0003/
- http://seclists.org/fulldisclosure/2025/Sep/55
- http://seclists.org/fulldisclosure/2025/Sep/54
- http://seclists.org/fulldisclosure/2025/Sep/53
- https://lists.debian.org/debian-lts-announce/2024/09/msg00000.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XYDHPHEZI7OQXTQKTDZHGZNPIJH7ZV5N/